Privacy Policy
Effective Date: January 6, 2026 | Last Updated: January 6, 2026
ThalosForge Inc. ("ThalosForge," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, company name, job title when you register
- Payment Information: Billing address, payment method details (processed by our payment provider)
- Communications: Content of emails, support tickets, and other communications with us
- API Data: Data you submit through our APIs for processing
1.2 Information Collected Automatically
- Usage Data: API calls, endpoints accessed, request/response metadata, timestamps
- Device Information: IP address, browser type, operating system
- Log Data: Server logs, error reports, performance metrics
- Cookies: Session cookies for authentication, analytics cookies (with consent)
2. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and maintain the Services | Contract performance |
| Process payments and billing | Contract performance |
| Send service-related communications | Contract performance |
| Respond to support requests | Contract performance |
| Monitor and improve Services | Legitimate interest |
| Detect and prevent fraud/abuse | Legitimate interest |
| Send marketing communications | Consent |
| Comply with legal obligations | Legal obligation |
3. Data Processing for API Services
Important: Data you submit through our APIs is processed solely to provide the requested service. We do not use your API data to train models, for marketing, or for any purpose other than delivering results to you.
- API request data is processed in real-time and not stored beyond the request lifecycle unless you enable logging features
- Optimization results may be cached temporarily to improve performance
- You can request deletion of any cached data at any time
4. Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
4.1 Service Providers
- Cloud infrastructure providers (AWS, Railway)
- Payment processors (Stripe)
- Analytics providers
- Customer support tools
All service providers are bound by data processing agreements and may only use your data to provide services to us.
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 2 years |
| API usage logs | 90 days |
| Billing records | 7 years (legal requirement) |
| Support tickets | 3 years after resolution |
| Marketing preferences | Until withdrawn |
6. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Regular security assessments and penetration testing
- Access controls and authentication requirements
- Employee security training
- Incident response procedures
7. Your Rights
Depending on your location, you may have the following rights:
7.1 GDPR Rights (EU/EEA)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
7.2 CCPA Rights (California)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell data)
- Right to non-discrimination for exercising rights
To exercise any of these rights, contact us at privacy@thalosforge.com.
8. International Data Transfers
Your data may be transferred to and processed in the United States. For transfers from the EU/EEA, we rely on:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements with appropriate safeguards
9. Cookies and Tracking
9.1 Essential Cookies
Required for the Services to function (authentication, security). Cannot be disabled.
9.2 Analytics Cookies
Help us understand how you use our Services. You can opt-out through your browser settings or our cookie preferences.
9.3 Marketing Cookies
Used only with your consent for personalized advertising.
10. Children's Privacy
Our Services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Services. Your continued use after such notice constitutes acceptance.
12. Contact Us
For privacy-related questions or to exercise your rights:
ThalosForge Inc.
Email: privacy@thalosforge.com
Website: www.thalosforge.com
For EU residents, you also have the right to lodge a complaint with your local data protection authority.